Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/Vu2LB0-sMuPMml6dXOblFA0My3w.roa
File: Vu2LB0-sMuPMml6dXOblFA0My3w.roa (raw, json)
Hash identifier: 0SOBNXhAwGBucB+P3DT2iapPdLRmq94ginicwr2mtyI=
Subject key identifier: 56:ED:8B:07:4F:AC:32:E3:CC:9A:5E:9D:5C:E6:E5:14:0D:0C:CB:7C
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0B9F
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Vu2LB0-sMuPMml6dXOblFA0My3w.roa
Signing time: Fri 01 Sep 2023 09:11:30 +0000
ROA not before: Fri 01 Sep 2023 09:11:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18042
IP address blocks: 61.63.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2975 (0xb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Sep 1 09:11:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=56ED8B074FAC32E3CC9A5E9D5CE6E5140D0CCB7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:b2:f8:b8:08:03:97:fd:bf:f4:a5:57:68:
39:f7:e7:a0:37:7d:72:34:11:75:9e:b4:35:3d:cb:
5a:3a:7f:46:56:03:5e:99:e6:03:b0:05:f4:68:5f:
1a:6c:36:14:af:f8:06:57:a9:4b:bf:48:89:a6:b3:
88:ed:91:20:58:91:3e:e1:8c:99:df:3b:ab:91:ae:
d2:e0:78:8c:fc:8f:3a:43:e3:6a:4c:6f:24:d3:c3:
2b:e4:6c:2a:5a:a4:08:39:89:ee:83:f8:9b:df:a7:
04:f3:4e:21:41:ca:5d:fe:59:3d:6f:f7:18:c0:0f:
64:22:f9:27:6e:38:d3:2f:35:1b:e2:72:28:56:25:
5d:08:e2:40:f9:78:58:7e:0a:3c:62:1b:50:9b:10:
b7:be:1b:b1:3c:78:f3:59:9e:4f:76:5d:92:38:1c:
bc:e5:62:67:e7:44:6b:01:61:63:a9:53:a0:12:a8:
21:9e:f7:7a:e3:c5:21:c3:c8:7a:46:11:ae:f9:45:
21:e7:4a:5f:e6:8f:e7:c6:96:d4:ba:61:96:fe:29:
ec:40:32:54:53:73:26:62:62:77:5a:ff:37:4b:6a:
88:a0:63:77:ff:7d:dd:88:2e:79:bb:bb:ad:c1:c4:
9b:9b:3b:bb:aa:9e:8c:a3:bd:ce:79:d3:b8:1d:7f:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:ED:8B:07:4F:AC:32:E3:CC:9A:5E:9D:5C:E6:E5:14:0D:0C:CB:7C
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Vu2LB0-sMuPMml6dXOblFA0My3w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.63.32.0/19
Signature Algorithm: sha256WithRSAEncryption
18:62:2f:0b:ec:24:67:9b:22:cf:bb:69:73:fc:47:db:13:c8:
29:43:db:de:b9:81:b0:ed:ee:0c:81:5d:66:b6:95:eb:c3:cc:
4f:82:db:da:c1:86:5e:06:52:07:5f:ed:fd:33:2f:7c:62:06:
c2:6c:9b:90:de:e0:cd:00:63:16:d4:82:f3:5b:22:29:50:6a:
ab:6c:91:0f:0c:ea:30:0f:2c:44:fc:e2:bf:21:e2:40:da:b1:
b4:8e:5a:29:10:e4:cb:6e:28:9c:1f:74:91:fa:bf:de:0a:c9:
ba:48:2e:a9:ca:66:58:e2:26:ad:d5:d6:01:d8:16:97:55:06:
7c:5a:e2:55:86:cc:f6:e8:fb:2c:96:c9:fb:0a:06:31:e3:d2:
21:f2:c9:7d:06:7b:e4:f2:fd:4f:33:30:f9:b1:0d:d5:cc:ee:
64:96:96:d6:f2:f2:7a:fc:8e:d0:66:1b:f5:a1:c7:ed:e3:0c:
30:81:a6:24:fb:aa:76:44:ac:83:09:50:15:50:d9:00:42:17:
bb:ba:78:a2:c1:f6:22:9c:31:99:ef:ba:de:cf:1e:7b:c3:0a:
f1:5e:57:5d:c2:06:f9:37:c5:ef:c3:a9:13:46:b7:3b:db:e9:
0d:b6:4f:79:2b:7a:02:3a:8a:30:4a:c4:d7:e3:0b:d7:1d:36:
49:24:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:19 2025 by rpki-client